Documentation enhancements about padrino-docs HOT 8 OPEN

From @nesquena on March 18, 2013 19:57

Awesome, thanks definitely want to help get those fleshed out soon.

from padrino-docs.

From @dariocravero on March 18, 2013 19:58

And we will! 👯

from padrino-docs.

From @Ortuna on March 18, 2013 20:4

Does this go in padrino-docs ?

from padrino-docs.

From @dariocravero on March 18, 2013 20:12

It does for now @Ortuna. Until we decide whether we move it to the main repo or not.

from padrino-docs.

From @skade on March 18, 2013 20:55

We should especially decide on what system to use. I like middleman alot and would like to get the idea of using something like qed for documentation testing further.

from padrino-docs.

From @nesquena on April 9, 2013 7:44

Notes for CSRF section from @skade

CSRF attacks are a severe problem and the safety measures should never be turned off by default.

You need to pass a parameter called "authenticity_token" with the value "session[:csrf]" on every post request. If you work sessionless for parts of your app (e.g. for an API), you should add:

set :allow_disabled_csrf, true

And disable CSRF on a route-by-route basis:

get :foo, :csrf_protection => false do

end

Do only turn of CSRF protection completely if your app works completely sessionless. In that case, you should use another way of validating requests.

from padrino-docs.

From @nesquena on January 17, 2016 17:30

@wikimatze This represents a list of some of the most obvious missing or incomplete documentation. Any help in augmenting the guides with these would be much appreciated.

from padrino-docs.

Thanks for moving this around, it will take a while to document these and think we to put it, but I'm on my way.

from padrino-docs.